Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa
File:                     5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa (raw, json)
Hash identifier:          Pqlui6CcJ39sthbJJqydPivzdcRtoVIPWFuF3T+C+xs=
Subject key identifier:   3E:8F:BD:4B:B7:BF:63:2E:79:E3:45:FC:45:18:31:40:A4:14:2B:75
Certificate issuer:       /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial:       010D0C9F4328584D65152628C7E4A26E68D19210
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     399989
IP address blocks:        2607:340::/28 maxlen: 28
                          2607:340::/29 maxlen: 29
                          2607:348::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:26:28:c7:e4:a2:6e:68:d1:92:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=337a28cf-e194-4271-9b4d-f3b49b901459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:32:0e:26:18:60:d6:6f:04:ec:f3:55:fe:
                    8a:ab:7d:3e:71:c8:cd:cb:fd:07:e5:9c:8d:31:50:
                    3e:a8:c3:ab:02:15:8f:4f:28:78:df:ec:38:a3:09:
                    47:9e:06:73:a9:8a:8f:29:44:c6:fc:e5:94:31:f3:
                    fe:05:8d:12:87:f5:dd:cf:53:9a:c7:a2:5f:2f:f4:
                    97:c8:6b:f9:95:ad:dd:0b:df:b5:d2:4c:61:f6:9f:
                    f5:14:f3:80:3c:f7:60:d8:73:b3:55:20:66:20:6c:
                    f2:c9:d3:3c:3e:04:5e:aa:64:0b:6f:4f:8c:28:62:
                    61:ba:86:45:15:86:25:37:0c:e6:e1:6a:87:9f:82:
                    d4:e9:4f:90:16:1c:f7:3d:6e:98:76:a5:96:5f:25:
                    a8:0d:8c:4c:22:10:9f:d4:8a:f1:fd:e4:bd:4c:5b:
                    68:75:6b:0e:19:1e:c0:54:7e:c0:34:cc:b2:a1:04:
                    78:12:92:5b:cd:dc:60:56:5f:17:d1:fa:79:7e:21:
                    1c:a7:17:30:77:5f:e6:6c:10:35:e1:5b:42:9d:eb:
                    52:f3:3c:64:b5:b8:08:15:d4:bd:71:a5:65:a3:96:
                    98:25:37:b7:36:0f:4c:30:fe:a1:1c:75:40:a8:d4:
                    e2:8a:5d:c4:44:54:9d:bb:6c:63:fa:92:44:7b:db:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8F:BD:4B:B7:BF:63:2E:79:E3:45:FC:45:18:31:40:A4:14:2B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl

            X509v3 Authority Key Identifier:
                keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:340::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:ff:2b:8d:b7:e3:0e:88:27:a0:cd:cb:5f:45:2a:b7:13:
         58:ae:16:73:99:02:3f:69:6f:88:65:c2:a6:07:37:7c:1c:1d:
         01:85:f3:e6:65:b2:dd:8c:24:99:61:77:cf:06:3f:50:21:c5:
         59:4f:24:54:4a:cd:46:87:e9:27:f7:72:15:13:f1:88:0f:ce:
         87:52:42:e2:43:d2:d2:90:8a:b0:98:31:6c:b4:54:7c:2e:8b:
         bb:e8:bb:cc:46:b5:fa:c6:80:b4:db:dc:7f:b0:ee:74:e0:ea:
         91:54:b5:38:2f:49:33:f1:2e:f4:ff:e8:6a:20:4a:9b:fa:6c:
         0f:80:b5:6a:bc:34:0f:a6:67:e2:81:87:78:9e:e4:5a:7b:37:
         7f:eb:bf:ec:67:f8:db:ec:1f:1d:38:ab:73:b6:8e:aa:c9:14:
         fd:e5:70:11:be:96:af:6b:e9:8b:e5:db:4b:f6:71:2f:30:51:
         45:f5:87:66:08:92:37:33:57:13:9d:09:db:02:bb:1c:5f:5f:
         09:3a:49:84:06:04:3c:1b:56:b8:85:85:1a:9a:b2:f9:69:e1:
         d3:5e:cd:41:93:9c:ba:e2:be:0e:d0:3e:3d:b9:f2:85:a2:37:
         02:5f:91:a5:e5:cb:91:97:34:f7:90:81:77:ab:7e:ab:d6:fa:
         9b:ae:bb:6b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1lFSYox+SibmjRkhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0
NDJjMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk
MzM3YTI4Y2YtZTE5NC00MjcxLTliNGQtZjNiNDliOTAxNDU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWwyDiYYYNZvBOzzVf6Kq30+ccjNy/0H5ZyN
MVA+qMOrAhWPTyh43+w4owlHngZzqYqPKUTG/OWUMfP+BY0Sh/Xdz1Oax6JfL/SX
yGv5la3dC9+10kxh9p/1FPOAPPdg2HOzVSBmIGzyydM8PgReqmQLb0+MKGJhuoZF
FYYlNwzm4WqHn4LU6U+QFhz3PW6YdqWWXyWoDYxMIhCf1Irx/eS9TFtodWsOGR7A
VH7ANMyyoQR4EpJbzdxgVl8X0fp5fiEcpxcwd1/mbBA14VtCnetS8zxktbgIFdS9
caVlo5aYJTe3Ng9MMP6hHHVAqNTiil3ERFSdu2xj+pJEe9vQ/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFD6PvUu3v2MueeNF/EUYMUCkFCt1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz
YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvNWFjMGEzZDktYmU5Zi0z
NmM5LTliYjktODZkYmM5MjY1OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5
MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl
NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw
ZTVmZTQ0MmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgcDQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAT8/8rjbfjDognoM3LX0UqtxNYrhZzmQI/aW+IZcKmBzd8HB0BhfPm
ZbLdjCSZYXfPBj9QIcVZTyRUSs1Gh+kn93IVE/GID86HUkLiQ9LSkIqwmDFstFR8
Lou76LvMRrX6xoC029x/sO504OqRVLU4L0kz8S70/+hqIEqb+mwPgLVqvDQPpmfi
gYd4nuRaezd/67/sZ/jb7B8dOKtzto6qyRT95XARvpava+mL5dtL9nEvMFFF9Ydm
CJI3M1cTnQnbArscX18JOkmEBgQ8G1a4hYUamrL5aeHTXs1Bk5y64r4O0D49ufKF
ojcCX5Gl5cuRlzT3kIF3q36r1vqbrrtr
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:00 2026 by rpki-client